Q. Why might unintentional DoS conditions occur during a penetration test?

View solution

Q. What are some common tools for creating DoS conditions in a penetration test?

View solution

Q. What is the purpose of HTTP Unbearable Load King (HULK) and Low Orbit Ion Cannon (LOIC)?

View solution

Q. Why is it important to verify the correct target and obtain permission before using common DoS tools?

View solution

Q. What is exploit chaining in the context of penetration testing?

View solution

Q. What is NetBIOS commonly used for in a Windows network?

View solution

Q. In Windows systems, what is the order of lookup methods when resolving the IP address for a hostname?

View solution

Q. Why is targeting the NetBIOS name service considered an effective attack?

View solution

Q. How can captured hashes from SMB spoofing be reused for pass-the-hash–style attacks?

View solution

Q. How can Responder be used in exploiting NetBIOS and LLMNR responses?

View solution

Q. What does Responder automatically capture when it sees an authentication attempt?

View solution

Q. What functionality built into the Responder tool allows the gathering of more credentials and hashes after gaining access to a remote system?

View solution

Q. What is a popular target for penetration testers in Windows systems, and what vulnerability is often exploited in unpatched systems?

View solution

Q. What does the Metasploit tool include to target the EternalBlue vulnerability in the Windows SMB server?

View solution

Q. Which services does the PenTest+ exam specifically ask test-takers to be familiar with in terms of exploits?

View solution

Q. What is the primary purpose of Nmap in the context of network attacks?

View solution

Q. Which tool is often called a network Swiss army knife and can be used for purposes such as port scanning and creating a reverse shell?

View solution

Q. What port does SNMP commonly operate on?

View solution

Q. What is one of the first steps for SNMP exploitation?

View solution

Q. Which version of SNMP is functionally equivalent to SNMP v2 but adds additional security capabilities to provide confidentiality, integrity, and authentication?

View solution